https://bugs.kde.org/show_bug.cgi?id=489441

--- Comment #9 from [email protected] ---
(In reply to WS from comment #8)
> I think there’s still a misunderstanding about what I’m describing, so let
> me clarify again:
> 
> I’m not using Fedora nor a Distro that adds users to the wheel group or
> anything of the sort, and I’m not asking for any change to Flatpak,
> PackageKit, or system-level permissions.

Yes you are.

https://en.opensuse.org/SDB:Administer_with_sudo#Setting_group_access

> On my distro, users cannot install or update anything that requires root,
> they will always get a sudo prompt. That works as expected, even I get a
> sudo prompt, which in my eyes is ideal.

Correct. Intentional behaviour.

> What I’m requesting is just a Discover feature:
> The ability to hide or mask certain repo from the Discover UI on a per-user
> basis, without removing them from the system.

No.

System repos apply to the system, they apply to ALL users by design.
User repos apply only to the user that configured it.
Therefore, user repos don't need to be masked.

> I'm not even asking for a tool to automatically do it for every user. I'm
> still thinking I'd have to open Discover’s settings page on each user and
> simply mask  “System Flatpak" or “PackageKit” so that their Discover only
> shows software from the user’s own Flatpak repo.

There is no need to mask them. You just need to stop users
installing software from system repos.
Read this and change user permissions accordingly.
https://discussion.fedoraproject.org/t/flatpak-non-sudo-install-still-installing-as-system/137019/3

> What I want is to:
> 
> 1. Prevent other users in a multi-user system from seeing or interacting
> with root-level packages in Discover

See link above to Fedora discussion page.

> 2. Drastically reduce the amound of root prompt those users will be able to
> see.

Users may still see password prompts if they install,
For example, 18+ rated games, even from user repositores.

> 3. Leave the actual packageKit and system-flatpak repo untouched

No problem. Revoke user permissions as per the Fedora discussion link.

> I managed to basically get the same results by removing packageKit and
> system-flatpak repo, which is a convoluted solution for multi-user systems

Unecessary.

Please understand I will not be replying again.
It is your job as the administrator to choose who can
Install what software.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to